Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/vpEaKR-8OrTDNwA_GmVK4THa9ak.roa
File: vpEaKR-8OrTDNwA_GmVK4THa9ak.roa (raw, json)
Hash identifier: 93fdrbsiH3+oqtls1uBcodFrJBzpjP3wAXN999WytmU=
Subject key identifier: BE:91:1A:29:1F:BC:3A:B4:C3:37:00:3F:1A:65:4A:E1:31:DA:F5:A9
Certificate issuer: /CN=26ad7d3560134e0a8ae46fc5b32c5acb61dde39c
Certificate serial: 018CC8DED549B8ADCAAEA6278D3DA4E35E7D
Authority key identifier: 26:AD:7D:35:60:13:4E:0A:8A:E4:6F:C5:B3:2C:5A:CB:61:DD:E3:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jq19NWATTgqK5G_Fsyxay2Hd45w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/vpEaKR-8OrTDNwA_GmVK4THa9ak.roa
Signing time: Tue 02 Jan 2024 06:31:35 +0000
ROA not before: Tue 02 Jan 2024 06:31:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 91.205.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jq19NWATTgqK5G_Fsyxay2Hd45w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:d5:49:b8:ad:ca:ae:a6:27:8d:3d:a4:e3:5e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26ad7d3560134e0a8ae46fc5b32c5acb61dde39c
Validity
Not Before: Jan 2 06:31:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be911a291fbc3ab4c337003f1a654ae131daf5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:85:ab:4b:fa:e0:63:d0:ec:fb:54:64:d0:af:
02:34:b8:81:45:14:da:f2:8a:bc:8d:47:ca:45:68:
53:60:65:e5:64:99:f2:4d:a0:50:4e:ce:1a:24:32:
5f:60:a6:0a:7e:1f:2a:f9:7c:2c:e4:7e:a8:37:16:
bb:74:c2:5d:c5:57:f1:64:5c:29:9e:5d:f0:33:25:
66:3a:39:79:2a:aa:88:85:fc:df:7e:2c:83:7b:8b:
78:af:8e:be:c6:b7:c1:14:fc:e1:7e:1e:ff:8e:af:
df:75:dd:d2:a4:aa:c5:b6:10:14:2d:58:39:9c:0c:
90:7e:8d:fe:38:d9:60:75:42:12:fb:6d:6c:49:3d:
b8:82:c1:af:2e:90:db:8e:b5:a9:f5:7e:1f:dd:4b:
44:81:ca:3f:ea:4d:52:c5:b0:11:dd:67:0a:92:98:
cd:e2:a9:21:83:65:2f:34:ab:66:ee:dc:cb:87:fb:
13:bb:b2:e8:16:d9:05:e8:d1:53:23:21:b4:67:05:
21:01:cd:7c:c3:c9:6e:07:1b:8e:1f:ee:38:57:b0:
81:60:bb:d3:4a:4f:c0:a0:82:7f:19:d4:b0:9f:be:
a2:25:7a:f4:50:1a:8c:bf:77:8b:9a:7b:71:e3:ea:
a1:c3:4d:44:81:50:8b:a2:16:b6:f6:7a:1c:78:d3:
c7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:91:1A:29:1F:BC:3A:B4:C3:37:00:3F:1A:65:4A:E1:31:DA:F5:A9
X509v3 Authority Key Identifier:
keyid:26:AD:7D:35:60:13:4E:0A:8A:E4:6F:C5:B3:2C:5A:CB:61:DD:E3:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jq19NWATTgqK5G_Fsyxay2Hd45w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/vpEaKR-8OrTDNwA_GmVK4THa9ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.42.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:87:1d:61:8c:9d:42:e1:2e:e5:25:66:c1:ee:4c:16:81:4f:
9a:aa:86:93:96:3b:df:fa:20:3f:57:2d:c7:69:b9:83:2f:e7:
14:7a:14:2d:ef:b7:59:8a:35:45:74:f1:81:51:32:c7:a8:b0:
f6:8d:ff:98:29:d0:33:99:51:b8:64:50:b6:5f:9b:d5:52:6d:
07:64:ef:da:50:57:24:10:4f:5c:68:ad:10:ce:97:a8:30:7c:
b8:e4:00:17:f1:c6:85:e1:fe:10:6f:a3:23:c2:c5:e4:86:b6:
96:ef:26:2f:20:f0:bf:3d:7c:ef:5c:9b:f7:f1:0c:04:cd:4f:
81:38:d7:cb:1c:1e:e8:02:de:ed:63:02:34:f9:f0:13:6c:6c:
79:ca:a8:cc:bb:66:e3:cc:b9:f3:e1:a8:13:76:ea:03:b1:10:
37:da:e9:dc:51:48:7d:d7:bb:4b:5d:85:c0:e1:0d:ed:04:63:
22:b2:12:0e:ef:2c:50:e7:99:75:4a:6f:cc:04:69:8a:f7:72:
5f:78:df:0c:46:ec:f9:6e:46:2f:43:a0:a4:5b:f5:7f:40:b9:
57:97:11:e2:d9:2d:23:38:7d:38:7a:94:9f:b2:60:67:4c:18:
20:a3:48:9d:0d:16:b3:f4:79:ef:24:77:ca:76:24:eb:71:b1:
f6:42:e4:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3tVJuK3KrqYnjT2k4159MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YWQ3ZDM1NjAxMzRlMGE4YWU0NmZjNWIzMmM1YWNiNjFk
ZGUzOWMwHhcNMjQwMTAyMDYzMTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTkxMWEyOTFmYmMzYWI0YzMzNzAwM2YxYTY1NGFlMTMxZGFmNWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7oWrS/rgY9Ds+1Rk0K8CNLiBRRTa
8oq8jUfKRWhTYGXlZJnyTaBQTs4aJDJfYKYKfh8q+Xws5H6oNxa7dMJdxVfxZFwp
nl3wMyVmOjl5KqqIhfzffiyDe4t4r46+xrfBFPzhfh7/jq/fdd3SpKrFthAULVg5
nAyQfo3+ONlgdUIS+21sST24gsGvLpDbjrWp9X4f3UtEgco/6k1SxbAR3WcKkpjN
4qkhg2UvNKtm7tzLh/sTu7LoFtkF6NFTIyG0ZwUhAc18w8luBxuOH+44V7CBYLvT
Sk/AoIJ/GdSwn76iJXr0UBqMv3eLmntx4+qhw01EgVCLoha29noceNPHOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL6RGikfvDq0wzcAPxplSuEx2vWpMB8GA1UdIwQY
MBaAFCatfTVgE04KiuRvxbMsWsth3eOcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnExOU5XQVRUZ3FLNUdfRnN5eGF5MkhkNDV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni85OGZjYjUtODdhNy00ZmRlLTk4NDct
NDkwMmE2NmIyZDk1LzEvdnBFYUtSLThPclRETndBX0dtVks0VEhhOWFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni85OGZjYjUtODdhNy00ZmRlLTk4NDctNDkwMmE2NmIyZDk1
LzEvSnExOU5XQVRUZ3FLNUdfRnN5eGF5MkhkNDV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW80qMA0G
CSqGSIb3DQEBCwUAA4IBAQA9hx1hjJ1C4S7lJWbB7kwWgU+aqoaTljvf+iA/Vy3H
abmDL+cUehQt77dZijVFdPGBUTLHqLD2jf+YKdAzmVG4ZFC2X5vVUm0HZO/aUFck
EE9caK0QzpeoMHy45AAX8caF4f4Qb6MjwsXkhraW7yYvIPC/PXzvXJv38QwEzU+B
ONfLHB7oAt7tYwI0+fATbGx5yqjMu2bjzLnz4agTduoDsRA32uncUUh917tLXYXA
4Q3tBGMishIO7yxQ55l1Sm/MBGmK93JfeN8MRuz5bkYvQ6CkW/V/QLlXlxHi2S0j
OH04epSfsmBnTBggo0idDRaz9HnvJHfKdiTrcbH2QuRL
-----END CERTIFICATE-----
Generated at Thu May 2 18:32:01 2024 by rpki-client on console-fra.rpki-client.org